schema-inspector - npm Package Compare versions

Comparing version 2.0.2 to 2.0.3

lib/schema-inspector.js

		@@ -198,19 +198,11 @@ // Disable no-var because we need to support old IE for now.
		color: /^#([0-9a-f])+$/i,
		// 2021-03-13 - Email regex was replaced with result of running email-safe-regex
		// latest version as of that day in order so fix GHSL-2020-35.
		// const emailRegexSafe = require('email-regex-safe');
		// const regexString = emailRegexSafe({
		// exact: true,
		// returnString: true,
		// });
		// <using debugger to inspect state of regexString after previous statement>
		//
		// Note that this regex is pretty flexible, but it's a bit stricter than
		// what we had before. It requires the local part of the email address to
		// be at least two characters. Was able to find some justification for
		// this at https://stackoverflow.com/a/15783334/5051165. Test suite
		// was corrected accordingly.
		/* eslint-disable prefer-regex-literals */
		/* eslint-disable quotes */
		email: new RegExp(`(?:[^\\W_](?:[\\w\\.\\+]+)@(?:localhost\|(?:25[0-5]\|2[0-4]\\d\|1\\d\\d\|[1-9]\\d\|\\d)(?:\\.(?:25[0-5]\|2[0-4]\\d\|1\\d\\d\|[1-9]\\d\|\\d)){3}\|(?:(?:[a-z\\u00a1-\\uffff0-9][-_])[a-z\\u00a1-\\uffff0-9]+)(?:\\.(?:[a-z\\u00a1-\\uffff0-9]-)[a-z\\u00a1-\\uffff0-9]+)*(?:\\.(?:northwesternmutual\|travelersinsurance\|vermögensberatung\|vermögensberater\|americanexpress\|kerryproperties\|sandvikcoromant\|afamilycompany\|americanfamily\|bananarepublic\|cancerresearch\|cookingchannel\|kerrylogistics\|weatherchannel\|international\|lifeinsurance\|spreadbetting\|travelchannel\|wolterskluwer\|construction\|lplfinancial\|scholarships\|versicherung\|accountants\|barclaycard\|blackfriday\|blockbuster\|bridgestone\|calvinklein\|contractors\|creditunion\|engineering\|enterprises\|foodnetwork\|investments\|kerryhotels\|lamborghini\|motorcycles\|olayangroup\|photography\|playstation\|productions\|progressive\|redumbrella\|williamhill\|சிங்கப்பூர்\|accountant\|apartments\|associates\|basketball\|bnpparibas\|boehringer\|capitalone\|consulting\|creditcard\|cuisinella\|eurovision\|extraspace\|foundation\|healthcare\|immobilien\|industries\|management\|mitsubishi\|nationwide\|nextdirect\|onyourside\|properties\|protection\|prudential\|realestate\|republican\|restaurant\|schaeffler\|swiftcover\|tatamotors\|technology\|university\|vlaanderen\|volkswagen\|accenture\|alfaromeo\|allfinanz\|amsterdam\|analytics\|aquarelle\|barcelona\|bloomberg\|christmas\|community\|directory\|education\|equipment\|fairwinds\|financial\|firestone\|fresenius\|frontdoor\|fujixerox\|furniture\|goldpoint\|hisamitsu\|homedepot\|homegoods\|homesense\|institute\|insurance\|kuokgroup\|lancaster\|landrover\|lifestyle\|marketing\|marshalls\|melbourne\|microsoft\|panasonic\|passagens\|pramerica\|richardli\|scjohnson\|shangrila\|solutions\|statebank\|statefarm\|stockholm\|travelers\|vacations\|موريتانيا\|yodobashi\|abudhabi\|airforce\|allstate\|attorney\|barclays\|barefoot\|bargains\|baseball\|boutique\|bradesco\|broadway\|brussels\|budapest\|builders\|business\|capetown\|catering\|catholic\|cipriani\|cityeats\|cleaning\|clinique\|clothing\|commbank\|computer\|delivery\|deloitte\|democrat\|diamonds\|discount\|discover\|download\|engineer\|ericsson\|etisalat\|exchange\|feedback\|fidelity\|firmdale\|football\|frontier\|goodyear\|grainger\|graphics\|guardian\|hdfcbank\|helsinki\|holdings\|hospital\|infiniti\|ipiranga\|istanbul\|jpmorgan\|lighting\|lundbeck\|marriott\|maserati\|mckinsey\|memorial\|merckmsd\|mortgage\|observer\|partners\|pharmacy\|pictures\|plumbing\|property\|redstone\|reliance\|saarland\|samsclub\|security\|services\|shopping\|showtime\|softbank\|software\|stcgroup\|supplies\|training\|vanguard\|ventures\|verisign\|woodside\|السعودية\|yokohama\|abogado\|academy\|agakhan\|alibaba\|android\|athleta\|auction\|audible\|auspost\|avianca\|banamex\|bauhaus\|bentley\|bestbuy\|booking\|brother\|bugatti\|capital\|caravan\|careers\|channel\|charity\|chintai\|citadel\|clubmed\|college\|cologne\|comcast\|company\|compare\|contact\|cooking\|corsica\|country\|coupons\|courses\|cricket\|cruises\|dentist\|digital\|domains\|exposed\|express\|farmers\|fashion\|ferrari\|ferrero\|finance\|fishing\|fitness\|flights\|florist\|flowers\|forsale\|frogans\|fujitsu\|gallery\|genting\|godaddy\|grocery\|guitars\|hamburg\|hangout\|hitachi\|holiday\|hosting\|hoteles\|hotmail\|hyundai\|ismaili\|jewelry\|juniper\|kitchen\|komatsu\|lacaixa\|lanxess\|lasalle\|latrobe\|leclerc\|limited\|lincoln\|markets\|monster\|netbank\|netflix\|network\|neustar\|okinawa\|oldnavy\|organic\|origins\|philips\|pioneer\|politie\|realtor\|recipes\|rentals\|reviews\|rexroth\|samsung\|sandvik\|schmidt\|schwarz\|science\|shiksha\|singles\|staples\|storage\|support\|surgery\|systems\|temasek\|theater\|theatre\|tickets\|tiffany\|toshiba\|trading\|walmart\|wanggou\|watches\|weather\|website\|wedding\|whoswho\|windows\|winners\|xfinity\|католик\|الجزائر\|العليان\|اتصالات\|پاکستان\|البحرين\|كاثوليك\|இந்தியா\|yamaxun\|youtube\|zuerich\|abarth\|abbott\|abbvie\|africa\|agency\|airbus\|airtel\|alipay\|alsace\|alstom\|amazon\|anquan\|aramco\|author\|bayern\|beauty\|berlin\|bharti\|bostik\|boston\|broker\|camera\|career\|casino\|center\|chanel\|chrome\|church\|circle\|claims\|clinic\|coffee\|comsec\|condos\|coupon\|credit\|cruise\|dating\|datsun\|dealer\|degree\|dental\|design\|direct\|doctor\|dunlop\|dupont\|durban\|emerck\|energy\|estate\|events\|expert\|family\|flickr\|futbol\|gallup\|garden\|george\|giving\|global\|google\|gratis\|health\|hermes\|hiphop\|hockey\|hotels\|hughes\|imamat\|insure\|intuit\|jaguar\|joburg\|juegos\|kaufen\|kinder\|kindle\|kosher\|lancia\|latino\|lawyer\|lefrak\|living\|locker\|london\|luxury\|madrid\|maison\|makeup\|market\|mattel\|mobile\|monash\|mormon\|moscow\|museum\|mutual\|nagoya\|natura\|nissan\|nissay\|norton\|nowruz\|office\|olayan\|online\|oracle\|orange\|otsuka\|pfizer\|photos\|physio\|pictet\|quebec\|racing\|realty\|reisen\|repair\|report\|review\|rocher\|rogers\|ryukyu\|safety\|sakura\|sanofi\|school\|schule\|search\|secure\|select\|shouji\|soccer\|social\|stream\|studio\|supply\|suzuki\|swatch\|sydney\|taipei\|taobao\|target\|tattoo\|tennis\|tienda\|tjmaxx\|tkmaxx\|toyota\|travel\|unicom\|viajes\|viking\|villas\|virgin\|vision\|voting\|voyage\|vuelos\|walter\|webcam\|xihuan\|москва\|онлайн\|ファッション\|भारतम्\|ارامكو\|امارات\|الاردن\|المغرب\|ابوظبي\|مليسيا\|இலங்கை\|فلسطين\|yachts\|yandex\|zappos\|actor\|adult\|aetna\|amfam\|amica\|apple\|archi\|audio\|autos\|azure\|baidu\|beats\|bible\|bingo\|black\|boats\|bosch\|build\|canon\|cards\|chase\|cheap\|cisco\|citic\|click\|cloud\|coach\|codes\|crown\|cymru\|dabur\|dance\|deals\|delta\|drive\|dubai\|earth\|edeka\|email\|epson\|faith\|fedex\|final\|forex\|forum\|gallo\|games\|gifts\|gives\|glade\|glass\|globo\|gmail\|green\|gripe\|group\|gucci\|guide\|homes\|honda\|horse\|house\|hyatt\|ikano\|irish\|iveco\|jetzt\|koeln\|kyoto\|lamer\|lease\|legal\|lexus\|lilly\|linde\|lipsy\|lixil\|loans\|locus\|lotte\|lotto\|macys\|mango\|media\|miami\|money\|movie\|nexus\|nikon\|ninja\|nokia\|nowtv\|omega\|osaka\|paris\|parts\|party\|phone\|photo\|pizza\|place\|poker\|praxi\|press\|prime\|promo\|quest\|radio\|rehab\|reise\|ricoh\|rocks\|rodeo\|rugby\|salon\|sener\|seven\|sharp\|shell\|shoes\|skype\|sling\|smart\|smile\|solar\|space\|sport\|stada\|store\|study\|style\|sucks\|swiss\|tatar\|tires\|tirol\|tmall\|today\|tokyo\|tools\|toray\|total\|tours\|trade\|trust\|tunes\|tushu\|ubank\|vegas\|video\|vodka\|volvo\|wales\|watch\|weber\|weibo\|works\|world\|xerox\|ישראל\|বাংলা\|భారత్\|भारोत\|संगठन\|ایران\|بازار\|بھارت\|سودان\|همراه\|سورية\|ഭാരതം\|嘉里大酒店\|yahoo\|aarp\|able\|adac\|aero\|akdn\|ally\|amex\|arab\|army\|arpa\|arte\|asda\|asia\|audi\|auto\|baby\|band\|bank\|bbva\|beer\|best\|bike\|bing\|blog\|blue\|bofa\|bond\|book\|buzz\|cafe\|call\|camp\|care\|cars\|casa\|case\|cash\|cbre\|cern\|chat\|citi\|city\|club\|cool\|coop\|cyou\|data\|date\|dclk\|deal\|dell\|desi\|diet\|dish\|docs\|duck\|dvag\|erni\|fage\|fail\|fans\|farm\|fast\|fiat\|fido\|film\|fire\|fish\|flir\|food\|ford\|free\|fund\|game\|gbiz\|gent\|ggee\|gift\|gmbh\|gold\|golf\|goog\|guge\|guru\|hair\|haus\|hdfc\|help\|here\|hgtv\|host\|hsbc\|icbc\|ieee\|imdb\|immo\|info\|itau\|java\|jeep\|jobs\|jprs\|kddi\|kiwi\|kpmg\|kred\|land\|lego\|lgbt\|lidl\|life\|like\|limo\|link\|live\|loan\|loft\|love\|ltda\|luxe\|maif\|meet\|meme\|menu\|mini\|mint\|mobi\|moda\|moto\|name\|navy\|news\|next\|nico\|nike\|ollo\|open\|page\|pars\|pccw\|pics\|ping\|pink\|play\|plus\|pohl\|porn\|post\|prod\|prof\|qpon\|raid\|read\|reit\|rent\|rest\|rich\|rmit\|room\|rsvp\|ruhr\|safe\|sale\|sarl\|save\|saxo\|scot\|seat\|seek\|sexy\|shaw\|shia\|shop\|show\|silk\|sina\|site\|skin\|sncf\|sohu\|song\|sony\|spot\|star\|surf\|talk\|taxi\|team\|tech\|teva\|tiaa\|tips\|town\|toys\|tube\|vana\|visa\|viva\|vivo\|vote\|voto\|wang\|weir\|wien\|wiki\|wine\|work\|xbox\|ಭಾರತ\|ଭାରତ\|大众汽车\|ভাৰত\|ভারত\|موقع\|香格里拉\|сайт\|アマゾン\|дети\|ポイント\|ලංකා\|電訊盈科\|クラウド\|ભારત\|भारत\|عمان\|بارت\|ڀارت\|عراق\|شبكة\|بيتك\|组织机构\|تونس\|グーグル\|ਭਾਰਤ\|yoga\|zara\|zero\|zone\|aaa\|abb\|abc\|aco\|ads\|aeg\|afl\|aig\|anz\|aol\|app\|art\|aws\|axa\|bar\|bbc\|bbt\|bcg\|bcn\|bet\|bid\|bio\|biz\|bms\|bmw\|bom\|boo\|bot\|box\|buy\|bzh\|cab\|cal\|cam\|car\|cat\|cba\|cbn\|cbs\|ceo\|cfa\|cfd\|com\|cpa\|crs\|csc\|dad\|day\|dds\|dev\|dhl\|diy\|dnp\|dog\|dot\|dtv\|dvr\|eat\|eco\|edu\|esq\|eus\|fan\|fit\|fly\|foo\|fox\|frl\|ftr\|fun\|fyi\|gal\|gap\|gay\|gdn\|gea\|gle\|gmo\|gmx\|goo\|gop\|got\|gov\|hbo\|hiv\|hkt\|hot\|how\|ibm\|ice\|icu\|ifm\|inc\|ing\|ink\|int\|ist\|itv\|jcb\|jio\|jll\|jmp\|jnj\|jot\|joy\|kfh\|kia\|kim\|kpn\|krd\|lat\|law\|lds\|llc\|llp\|lol\|lpl\|ltd\|man\|map\|mba\|med\|men\|mil\|mit\|mlb\|mls\|mma\|moe\|moi\|mom\|mov\|msd\|mtn\|mtr\|nab\|nba\|nec\|net\|new\|nfl\|ngo\|nhk\|now\|nra\|nrw\|ntt\|nyc\|obi\|off\|one\|ong\|onl\|ooo\|org\|ott\|ovh\|pay\|pet\|phd\|pid\|pin\|pnc\|pro\|pru\|pub\|pwc\|qvc\|red\|ren\|ril\|rio\|rip\|run\|rwe\|sap\|sas\|sbi\|sbs\|sca\|scb\|ses\|sew\|sex\|sfr\|ski\|sky\|soy\|spa\|srl\|stc\|tab\|tax\|tci\|tdk\|tel\|thd\|tjx\|top\|trv\|tui\|tvs\|ubs\|uno\|uol\|ups\|vet\|vig\|vin\|vip\|wed\|win\|wme\|wow\|wtc\|wtf\|xin\|कॉम\|セール\|คอม\|我爱你\|қаз\|срб\|бел\|קום\|淡马锡\|орг\|नेट\|ストア\|мкд\|كوم\|中文网\|ком\|укр\|亚马逊\|诺基亚\|飞利浦\|мон\|عرب\|ไทย\|рус\|ລາວ\|みんな\|天主教\|مصر\|قطر\|հայ\|新加坡\|xxx\|xyz\|you\|yun\|zip\|ac\|ad\|ae\|af\|ag\|ai\|al\|am\|ao\|aq\|ar\|as\|at\|au\|aw\|ax\|az\|ba\|bb\|bd\|be\|bf\|bg\|bh\|bi\|bj\|bm\|bn\|bo\|br\|bs\|bt\|bv\|bw\|by\|bz\|ca\|cc\|cd\|cf\|cg\|ch\|ci\|ck\|cl\|cm\|cn\|co\|cr\|cu\|cv\|cw\|cx\|cy\|cz\|de\|dj\|dk\|dm\|do\|dz\|ec\|ee\|eg\|er\|es\|et\|eu\|fi\|fj\|fk\|fm\|fo\|fr\|ga\|gb\|gd\|ge\|gf\|gg\|gh\|gi\|gl\|gm\|gn\|gp\|gq\|gr\|gs\|gt\|gu\|gw\|gy\|hk\|hm\|hn\|hr\|ht\|hu\|id\|ie\|il\|im\|in\|io\|iq\|ir\|is\|it\|je\|jm\|jo\|jp\|ke\|kg\|kh\|ki\|km\|kn\|kp\|kr\|kw\|ky\|kz\|la\|lb\|lc\|li\|lk\|lr\|ls\|lt\|lu\|lv\|ly\|ma\|mc\|md\|me\|mg\|mh\|mk\|ml\|mm\|mn\|mo\|mp\|mq\|mr\|ms\|mt\|mu\|mv\|mw\|mx\|my\|mz\|na\|nc\|ne\|nf\|ng\|ni\|nl\|no\|np\|nr\|nu\|nz\|om\|pa\|pe\|pf\|pg\|ph\|pk\|pl\|pm\|pn\|pr\|ps\|pt\|pw\|py\|qa\|re\|ro\|rs\|ru\|rw\|sa\|sb\|sc\|sd\|se\|sg\|sh\|si\|sj\|sk\|sl\|sm\|sn\|so\|sr\|ss\|st\|su\|sv\|sx\|sy\|sz\|tc\|td\|tf\|tg\|th\|tj\|tk\|tl\|tm\|tn\|to\|tr\|tt\|tv\|tw\|tz\|ua\|ug\|uk\|us\|uy\|uz\|va\|vc\|ve\|vg\|vi\|vn\|vu\|wf\|ws\|佛山\|慈善\|集团\|在线\|한국\|点看\|八卦\|公益\|公司\|网站\|移动\|联通\|бг\|时尚\|微博\|삼성\|商标\|商店\|商城\|ею\|新闻\|家電\|中信\|中国\|中國\|娱乐\|谷歌\|购物\|通販\|网店\|餐厅\|网络\|香港\|食品\|台湾\|台灣\|手机\|澳門\|닷컴\|政府\|გე\|机构\|健康\|招聘\|рф\|大拿\|ευ\|ελ\|世界\|書籍\|网址\|닷넷\|コム\|游戏\|企业\|信息\|嘉里\|广东\|政务\|ye\|yt\|za\|zm\|zw))))`),
		// Very flexible regular expression designed to catch only obvious mistakes
		// that a user might make that would have a 100% chance of causing email
		// delivery to the address to fail. The library takes a flexible over
		// strict approach. Users should use this only for basic front end email
		// address validation and perform more strict checking using server-side
		// code after the data has been sent to their server.
		// Sourced from https://www.regular-expressions.info/email.html, modified
		// to allow lowercase characters too.
		email: /^[^@]+@[^.]+\.[a-zA-Z]+$/,
		/* eslint-enable prefer-regex-literals */
		@@ -217,0 +209,0 @@ /* eslint-enable quotes */

package.json

		{
		"name": "schema-inspector",
		"description": "Schema-Inspector is a powerful tool to sanitize and validate JS objects.",
		"version": "2.0.2",
		"version": "2.0.3",
		"main": "index.js",
		@@ -6,0 +6,0 @@ "author": {

README.md

		@@ -35,4 +35,6 @@ <!-- markdownlint-disable MD041 MD033 MD024 -->

		## Version 2.0.0
		## Notable changelogs

		### Version 2.0.0

		To fix a security vulnerability in the 1.x.x email Regex expression used, a new Regex expression was used which may be
		@@ -45,2 +47,6 @@ less flexible than the expression used in 1.x.x. Therefore, version 2.0.0 was released with this new expression. It's

		### Version 2.0.3

		The email address regular expression was changed again in this version, this time to the new approach towards email address validation that the library will use from now on. For details, see [How email address validation works](#v_pattern_email).

		## How it looks like
		@@ -321,4 +327,12 @@
		When a pattern is a RegExp, it directly test the string with it. When it's a
		string, it's an alias of a RegExp.
		string, it's an alias of a built-in RegExp that the library supports. For example, using the string `email` causes the built-in RegExp for email addresses to be used.

		<h4 id="v_pattern_email">How email address validation works</h4>

		It is a very flexible regular expression, so that the library is only designed to catch obvious mistakes a user might make in the front end of a system that would have a 100% chance to cause email delivery to fail. An exception is made to forbid email addresses that lack a domain (used only by internal systems). It is based on the recommended regular expression posted on [www.regular-expressions.info](https://www.regular-expressions.info/email.html), modified to allow lowercase alphabetic characters too.

		You should perform more thorough checking of email addresses that involves checking whether delivery to the email address would succeed or fail, from your server side code. This library should only be used as basic front end validation for user convenience (e.g. an error displayed in the front end before they submit a form vs. a system failure that may not make it clear to them what went wrong).

		If you want to validate strings more strictly than this, you should use your own custom regular expression instead of the `email` pattern.

		#### Example
		@@ -325,0 +339,0 @@

schema-inspector - npm Package Compare versions

Fixed alerts

Improved metrics

Worsened metrics